Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6A4DC0F6171B11EE9FB522174AD9E6FC.roa
File: 6A4DC0F6171B11EE9FB522174AD9E6FC.roa (raw, json)
Hash identifier: yHO+gl95oO0dvOtWBouYCL7Tu4RB0ZaJTPqIGuKq2+4=
Subject key identifier: 08:09:D8:7E:B6:52:47:B0:9C:A4:60:84:AC:84:65:4C:C0:72:B2:EB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1035
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6A4DC0F6171B11EE9FB522174AD9E6FC.roa
Signing time: Fri 30 Jun 2023 07:55:01 +0000
ROA not before: Fri 30 Jun 2023 07:54:57 +0000
ROA not after: Sun 29 Jun 2025 07:54:57 +0000
asID: 834
IP address blocks: 154.127.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4149 (0x1035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 30 07:54:57 2023 GMT
Not After : Jun 29 07:54:57 2025 GMT
Subject: CN=649e8a55-d41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:80:3f:c3:ae:3e:31:b5:57:86:7d:dd:35:
79:18:3d:21:26:c0:c6:43:6b:10:46:a9:ac:cf:9a:
b1:45:63:6a:93:c8:f7:03:00:23:88:dd:9f:0f:28:
ac:71:69:70:dd:76:47:51:67:c5:ff:5b:f2:72:5e:
85:f1:fa:56:b4:58:76:36:90:6a:92:a8:44:67:34:
d2:bf:30:24:3e:25:a5:27:ce:20:31:36:f2:04:9b:
5f:51:ee:d2:cd:86:ca:ea:85:7f:1b:5d:39:e3:11:
07:08:05:93:46:6f:21:ca:71:6f:32:64:81:cc:f0:
4e:d9:3b:fb:d8:96:b4:6a:f8:8a:57:08:94:db:d5:
63:d2:cc:f5:c0:c6:ca:c0:54:5b:bf:41:ce:0a:01:
a3:da:c9:63:67:a9:1f:9c:c5:17:04:97:8c:98:1e:
3f:1f:88:5f:89:7d:5f:37:1f:5b:69:b4:11:e1:a6:
46:9a:d8:de:f2:b8:3c:53:05:35:7a:6d:8a:84:79:
f5:9d:92:74:7d:93:91:89:57:98:41:6d:08:16:67:
a3:15:30:db:8e:ca:62:22:e5:45:79:d5:3a:98:62:
b0:2f:e0:3f:93:14:f9:bd:8b:b9:90:e2:c7:92:c0:
75:b3:a8:7b:5c:21:fd:f3:1e:0d:49:ba:39:a5:24:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:09:D8:7E:B6:52:47:B0:9C:A4:60:84:AC:84:65:4C:C0:72:B2:EB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6A4DC0F6171B11EE9FB522174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.50.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6c:ac:39:31:4d:f9:2a:92:49:94:bc:89:4d:8d:8e:cf:2a:
09:87:e8:ea:00:7c:53:6b:2a:df:10:f3:67:5e:58:56:85:31:
51:6a:7b:77:27:4c:ae:6f:08:1c:fc:2e:a4:19:a4:85:30:67:
7e:27:9c:6e:25:0a:91:85:c1:b5:1c:e0:1e:e0:60:a6:84:c3:
32:9e:3b:c0:80:c5:23:d6:2c:22:1f:3d:e9:92:c8:c1:53:ec:
e2:64:26:5c:06:04:75:1c:53:4d:27:ff:15:90:6d:91:e2:8f:
8d:7c:37:53:13:2d:4a:52:84:45:e9:4d:f8:29:b8:f5:73:79:
2e:0d:1d:aa:98:06:d7:4e:26:65:a3:31:4e:94:4d:0d:71:f3:
68:da:3e:11:9c:d0:35:30:24:a8:b4:9e:ec:c8:16:13:66:22:
12:dd:0a:59:0e:c3:6e:de:e6:06:9b:33:55:64:13:8a:67:6d:
8e:86:27:eb:0f:34:e9:c1:12:db:1e:7b:64:b2:86:bf:ee:c9:
ba:a9:44:52:76:67:4f:61:38:40:67:28:d4:02:06:f1:9c:61:
79:1a:1f:32:03:8d:4d:84:dd:42:57:8c:5d:c3:42:2d:e3:c4:
0c:5d:1e:3c:34:28:64:9d:c3:a4:db:77:13:dd:62:5e:4a:5e:
a9:fb:3f:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEDUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA2MzAwNzU0NTdaFw0yNTA2MjkwNzU0NTdaMBgxFjAU
BgNVBAMTDTY0OWU4YTU1LWQ0MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCm4A/w64+MbVXhn3dNXkYPSEmwMZDaxBGqazPmrFFY2qTyPcDACOI3Z8P
KKxxaXDddkdRZ8X/W/JyXoXx+la0WHY2kGqSqERnNNK/MCQ+JaUnziAxNvIEm19R
7tLNhsrqhX8bXTnjEQcIBZNGbyHKcW8yZIHM8E7ZO/vYlrRq+IpXCJTb1WPSzPXA
xsrAVFu/Qc4KAaPayWNnqR+cxRcEl4yYHj8fiF+JfV83H1tptBHhpkaa2N7yuDxT
BTV6bYqEefWdknR9k5GJV5hBbQgWZ6MVMNuOymIi5UV51TqYYrAv4D+TFPm9i7mQ
4seSwHWzqHtcIf3zHg1JujmlJDmhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUCAnY
frZSR7CcpGCErIRlTMBysuswHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzZBNERDMEY2MTcxQjExRUU5RkI1MjIxNzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzIwDQYJKoZIhvcNAQEL
BQADggEBABRsrDkxTfkqkkmUvIlNjY7PKgmH6OoAfFNrKt8Q82deWFaFMVFqe3cn
TK5vCBz8LqQZpIUwZ34nnG4lCpGFwbUc4B7gYKaEwzKeO8CAxSPWLCIfPemSyMFT
7OJkJlwGBHUcU00n/xWQbZHij418N1MTLUpShEXpTfgpuPVzeS4NHaqYBtdOJmWj
MU6UTQ1x82jaPhGc0DUwJKi0nuzIFhNmIhLdClkOw27e5gabM1VkE4pnbY6GJ+sP
NOnBEtsee2Syhr/uybqpRFJ2Z09hOEBnKNQCBvGcYXkaHzIDjU2E3UJXjF3DQi3j
xAxdHjw0KGSdw6TbdxPdYl5KXqn7P58=
Generated at Sat Sep 16 09:10:41 2023 by rpki-client on console-fra.rpki-client.org